Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
General
-
Target
file.exe
-
Size
831KB
-
MD5
5366923ead9108158a98fec9877b4f27
-
SHA1
43c9484cff049de63d839302a818ebcda860a41e
-
SHA256
6e60d38d66e9e2be35e7735751595b6de9a8583733da085d385d3f55192eaa8b
-
SHA512
d58223249d92a368b5f5764e7cdaf465e2639b1995434d444434ecff04e25c839ae4054b92081f1a384fe5e3e6daa676d0c47975203865815e3d57ee7fce9843
-
SSDEEP
24576:5x8Uvng/hofgMZdq2WSGBBat4pXTGnIMpWm/:Xxvng/hFWqlDat4tT1MT/
Malware Config
Signatures
Files
-
file.exe.exe windows x64
ecbe4aac947feaf05c89434ea2bada60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHGetIconOverlayIndexA
mscoree
_CorExeMain
advapi32
RegisterEventSourceW
user32
ReleaseDC
kernel32
GetModuleHandleA
Sections
.text Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE